N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-7wv4-cc7p-jhxc

GHSA-7wv4-cc7p-jhxc: OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Summary

Workspace .env could inject OpenClaw runtime-control variables.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.9
Patched versions: >= 2026.4.9

Impact

A malicious workspace .env file could set OpenClaw runtime-control variables affecting update sources, gateway URLs, ClawHub resolution, browser executable paths, and related behavior.

Technical Details

The fix blocks OpenClaw runtime-control keys and key families from workspace .env loading.

Fix

The issue was fixed in #62660. The first stable tag containing the fix is v2026.4.9, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

dbfcef319618158fa40b31cdac386ea34c392c0c
PR: #62660

Release Process Note

Users should upgrade to openclaw 2026.4.9 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-7wv4-cc7p-jhxc

GHSA-7wv4-cc7p-jhxc:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.9	2026.4.9

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, GHSA-7wv4-cc7p-jhxc, allows for the injection of runtime-control variables through a workspace's .env file in OpenClaw. The analysis of the fixing commit dbfcef319618158fa40b31cdac386ea34c392c0c reveals that the core of the issue lies in the insufficient filtering of environment variables when loading a .env file.

The file src/infra/dotenv.ts was modified to expand the blocklists of sensitive keys. The function loadWorkspaceDotEnvFile is identified as the primary function for loading these .env files, as demonstrated by its use in the new test cases within src/infra/dotenv.test.ts. This function processes the potentially malicious file.

Inside this process, the function shouldBlockWorkspaceRuntimeDotEnvKey is used to determine if a specific key should be blocked. The vulnerability was a bypass of this check due to incomplete blocklists. The patch addresses this by adding numerous runtime-control variables (e.g., OPENCLAW_GATEWAY_URL, BROWSER_EXECUTABLE_PATH) and key prefixes (e.g., OPENCLAW_SKIP_, OPENCLAW_UPDATE_) to the blocklists used by this function.

Therefore, during exploitation, the loadWorkspaceDotEnvFile function would be called to read the malicious .env file, and the shouldBlockWorkspaceRuntimeDotEnvKey function would fail to block the malicious keys, leading to their injection into the application's environment. Both functions would appear in a runtime profile of the exploitation.

Vulnerable functions

loadWorkspaceDotEnvFile

src/infra/dotenv.ts

This function loads and parses the `.env` file from a user's workspace. Prior to the patch, it did not adequately filter out sensitive environment variables that could alter the runtime behavior of OpenClaw. A malicious actor could craft a `.env` file with specific keys to control settings like gateway URLs, update sources, or executable paths, leading to a security compromise. The patch strengthens the filtering within this function.

shouldBlockWorkspaceRuntimeDotEnvKey

src/infra/dotenv.ts

This function is the core of the security control, responsible for deciding whether a given environment variable key from a workspace `.env` file is dangerous and should be blocked. The vulnerability existed because this function's underlying blocklists were incomplete, allowing malicious keys to bypass the check. The patch rectifies this by expanding the set of blocked keys and key patterns.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-7wv4-cc7p-jhxc: OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-7wv4-cc7p-jhxc:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

N/A

N/A

Technical Details

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-7wv4-cc7p-jhxc: OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI